Technical Information
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{28ABC5C0-4FCB-11CF-AAX5-81CX1C635612}] 'StubPath' = 'C:\RECYCLER\S-1-5-21-1482476501-1644491937-682003330-1013\ise323.e...
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = '<SYSTEM32>\userinit.exe,<SYSTEM32>\mycoxnt.exe'
- C:\recycler\s-1-5-21-1482476501-1644491937-682003330-1013\ise323.exe
- %WINDIR%\syswow64\mycoxnt.exe
- C:\recycler\s-1-5-21-1482476501-1644491937-682003330-1013\desktop.ini
- C:\recycler\s-1-5-21-1482476501-1644491937-682003330-1013\ise323.exe
- %WINDIR%\syswow64\mycoxnt.exe
- C:\recycler\s-1-5-21-1482476501-1644491937-682003330-1013\desktop.ini
- '%WINDIR%\syswow64\mycoxnt.exe'